Building Java™ Enterprise Systems with J2EE™

Chapter 27. Advanced Java Security

IN THIS CHAPTER

• Permissions

• Security Policies

• Java Access Control

• Principal Identification

• Protecting Objects

• Signing Code

• Java Security Extensions

Java security provides a collection of APIs and tools for infusing security into your Java applications. Infrastructure for providing fine-grained and configurable access control are built into the core Java security architecture via use of Java 2 permissions, policy files, and access controller functionality. Cryptography for information integrity and principal identity are built into the Java Cryptography Architecture (JCA) via use of message digests, signatures, keys, and certificates. Furthermore, industry-standard cryptography for confidentiality and authenticity can ...